$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/jxoPGkCT5URlHe0SOt0R_TNIYtE.roa File: jxoPGkCT5URlHe0SOt0R_TNIYtE.roa (raw, json) Hash identifier: kyfq1I2Q89o6dd5aiLdZ5C/WvWMfOX1zjP0U2oALqEs= Subject key identifier: 8F:1A:0F:1A:40:93:E5:44:65:1D:ED:12:3A:DD:11:FD:33:48:62:D1 Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D Certificate serial: 01C3 Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jxoPGkCT5URlHe0SOt0R_TNIYtE.roa Signing time: Sat 01 Nov 2025 01:31:20 +0000 ROA not before: Sat 01 Nov 2025 01:31:20 +0000 ROA not after: Thu 15 Oct 2026 01:30:02 +0000 asID: 2527 IP address blocks: 219.104.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D Validity Not Before: Nov 1 01:31:20 2025 GMT Not After : Oct 15 01:30:02 2026 GMT Subject: CN=8F1A0F1A4093E544651DED123ADD11FD334862D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:77:b2:f3:89:36:0b:38:8d:ad:34:28:4a:6c: cc:77:b2:0c:0d:67:70:e2:44:4f:12:f5:f3:18:99: cc:60:b5:9e:0e:98:dc:42:16:6f:36:ab:00:a0:62: 37:7f:f3:89:28:12:00:de:f5:5d:70:8b:29:d2:99: 10:1a:15:04:f8:de:7f:27:89:b3:e3:ac:76:13:2c: 49:be:8c:b1:16:1b:ba:d5:e7:80:3a:16:29:fb:1d: a6:b2:1b:27:88:8b:e6:93:d6:e3:59:29:d6:0f:ba: d1:2f:80:24:1b:89:01:e1:55:ec:7c:6c:f9:67:68: 60:50:a8:fb:2e:8f:35:e9:f0:fc:b1:5b:fc:12:27: 3f:4d:d1:ab:7a:e1:5c:86:b7:28:90:d2:63:bc:21: 8d:1c:ec:25:5a:d7:c6:62:8e:a4:f8:64:31:7c:67: bc:12:df:f5:de:2b:9f:04:1a:32:bf:ff:75:12:81: 60:24:dd:70:2b:cc:cc:21:93:30:0d:58:69:e4:e9: ac:d6:35:c5:d9:05:2b:34:d0:26:86:ba:f1:81:c7: 0c:cd:1a:95:cf:ae:0d:09:89:1e:9f:6a:cf:8d:6a: fc:43:d2:db:76:9c:79:f7:fa:02:25:f8:25:33:bd: 3a:03:8e:0c:52:9c:d3:da:12:64:3e:3c:d6:e0:9d: ef:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1A:0F:1A:40:93:E5:44:65:1D:ED:12:3A:DD:11:FD:33:48:62:D1 X509v3 Authority Key Identifier: keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/jxoPGkCT5URlHe0SOt0R_TNIYtE.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 219.104.0.0/16 Signature Algorithm: sha256WithRSAEncryption 00:b1:12:50:76:9b:ae:99:10:03:42:2a:19:84:fb:ae:85:79: 9c:36:29:3a:b1:8e:e6:78:f2:26:3e:33:75:ae:9d:a3:8e:9a: e9:36:a8:8f:01:55:38:d5:d3:0b:9c:0a:dc:0c:67:1b:23:a5: b5:45:21:c8:b7:8e:dd:1f:9d:0f:2d:2a:77:08:94:da:c5:3d: 95:a3:c5:f0:83:f3:b3:af:64:c6:a1:38:49:e5:70:15:de:a7: dc:f6:95:7a:1c:38:da:5e:94:35:fc:df:0d:1e:ca:c0:47:c2: 78:4b:f2:23:5c:f8:98:8d:9f:62:4e:b9:30:3e:02:ee:2a:bf: fa:d3:77:04:34:62:b7:10:80:02:42:5f:39:c5:78:f6:6e:7a: 63:57:42:ac:25:a5:0a:19:67:db:04:61:9c:73:e5:a7:c0:fd: 40:5e:9e:ef:9a:b4:f4:1b:81:d3:e2:9f:ee:bb:43:83:b4:b9: 6d:d6:6f:b3:b9:3c:14:9e:ee:7c:aa:4c:82:86:43:1a:40:4d: 8a:79:1a:94:c7:27:fe:f3:01:9a:1c:97:46:73:fa:91:07:f8: 0e:de:9d:b1:6e:d3:4e:46:3f:e9:36:7b:a0:9b:65:b8:d8:f0: 45:f1:3e:31:41:7c:63:01:da:c9:e7:c5:cf:60:a0:3b:4a:83: 86:27:b8:e9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1 QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNTExMDEw MTMxMjBaFw0yNjEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhGMUEwRjFBNDA5M0U1 NDQ2NTFERUQxMjNBREQxMUZEMzM0ODYyRDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC7d7LziTYLOI2tNChKbMx3sgwNZ3DiRE8S9fMYmcxgtZ4OmNxC Fm82qwCgYjd/84koEgDe9V1wiynSmRAaFQT43n8nibPjrHYTLEm+jLEWG7rV54A6 Fin7HaayGyeIi+aT1uNZKdYPutEvgCQbiQHhVex8bPlnaGBQqPsujzXp8PyxW/wS Jz9N0at64VyGtyiQ0mO8IY0c7CVa18ZijqT4ZDF8Z7wS3/XeK58EGjK//3USgWAk 3XArzMwhkzANWGnk6azWNcXZBSs00CaGuvGBxwzNGpXPrg0JiR6fas+NavxD0tt2 nHn3+gIl+CUzvToDjgxSnNPaEmQ+PNbgne9hAgMBAAGjggIhMIICHTAdBgNVHQ4E FgQUjxoPGkCT5URlHe0SOt0R/TNIYtEwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo 3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1 ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5 MUE3MzgxMDAwMC80My9qeG9QR2tDVDVVUmxIZTBTT3QwUl9UTklZdEUucm9hMEYG CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF AwMA22gwDQYJKoZIhvcNAQELBQADggEBAACxElB2m66ZEANCKhmE+66FeZw2KTqx juZ48iY+M3WunaOOmuk2qI8BVTjV0wucCtwMZxsjpbVFIci3jt0fnQ8tKncIlNrF PZWjxfCD87OvZMahOEnlcBXep9z2lXocONpelDX83w0eysBHwnhL8iNc+JiNn2JO uTA+Au4qv/rTdwQ0YrcQgAJCXznFePZuemNXQqwlpQoZZ9sEYZxz5afA/UBenu+a tPQbgdPin+67Q4O0uW3Wb7O5PBSe7nyqTIKGQxpATYp5GpTHJ/7zAZocl0Zz+pEH +A7enbFu005GP+k2e6CbZbjY8EXxPjFBfGMB2snnxc9goDtKg4YnuOk= -----END CERTIFICATE-----Generated at Wed Nov 5 20:32:01 2025 by rpki-client